lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <1077993549.22254.25.camel@tybalt>
From: sean.egan at binghamton.edu (Sean Egan)
Subject: The Trillian GPL violation allegations are confirmed false.

Concerned over allegations that Trillian stole source code from Gaim,
Scott Werndorfer, co-founder and manager of Cerulean Studios and myself,
lead developer of Gaim arranged for me to review Trillian's Yahoo!
source code in order to confirm that it was not stolen from Gaim.

Obviously, I've signed an NDA that prevents me from discussing any
specifics, but you can trust me that the code is very obviously not
Gaim's (with the exception of the old authentication code written by
myself which I've expressly permitted them to use, and the new auth code
written by Scott which he's expressly permitted us to use).

The code posted by Stefan Esser which started this issue
(yahoo_packet_read in Gaim) is certainly similar enough to compile into
the same machine language, but having compared the function in each
codebase, I'm convinced this is entirely coincidental.

I challenge you to write code to parse an efficient, sensible Yahoo
Messenger packet that compiles to something that doesn't resemble Gaim's
or Trillian's.

Trillian and Gaim have been friends for a long time.  They've just
allowed us to use their Yahoo authentication code and these attempts to
silence attacks on their character (sending their own code to the lead
developer of an open source competitor) are unprecedented.  Trillian
should be thanked, not slandered.

-s.


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ